session API
set up authentication for API calls